BCM5812 ? security processor BCM5812 in vpn applications ? feature-rich single-chip security processor integrating full- featured aes support 50-mbps system throughput des-cbc, 3des-cbc aes-cbc, aes-ctr (up to 256-bit key lengths) hmac-sha-1, hmac-md5 single-pass encryption and authentication integrated public-key processor 50 diffie-hellman transactions per second 65 1024-bit rsa transactions per second hardware supports 1024- and 2048-bit rsa keys support for ike and ssl/tls modes concurrent public-key and symmetric-key processing true hardware random number generator software-compatible with the bcm580x and bcm582x supports multi-packet processing and prefetch of packet data and context multi-threaded dma allows multi-packet processing with single pci write optimized pci interface pci 2.2 interface, 32-bit, 33 mhz optional eeprom interface to configure pci registers 0.18m-cmos technology, 1.8v core, 3.3v i/o low power consumption: 0.45w 196-pin fbga (15 x 15) package software-compatible solutions enables scalability across product families improves security performance in cost-sensitive, low-power embedded applications soho routers low-end routers vpn appliances firewalls aes support provides latest algorithm support and protects against obsolescence 256-bit key length support of aes enables fast ike negotiations for vpn applications sustainable performance in real-world conditions dma supports multi-packet processing prefetch of new context and packet extensive embedded software development kit (sdk) vxworks ? , linux ? , bsd ? support software reference library complete reference design concurrent processing minimizes latency on public-key and symmetric-key operations integration reduces footprint and power consumption for embedded applications features summary of benefits wan interface bcm 5812 security processor BCM5812 security processor pci bus cpu cpu bridge & dram controller bridge & dram controller dram dram lan interface
overview ? phone: 949-450-8700 fax: 949-450-8710 e-mail: info@broadcom.com web: www.broadcom.com broadcom corporation 16215 alton parkway, p.o. box 57013 irvine, california 92619-7013 ? 2004 by broadcom corporation. all rights reserved. 5812-pb01-r 02/13/04 broadcom ? , the pulse logo, connecting everything ? , and cryptonetx are trademarks of broadcom corporation and/or its subsidiaries in the united stat es and certain other countries. all other trademarks mentioned are the property of their respective owners. the BCM5812 complements the cr yptonetx? family of security processors. offering software co mpatibility with the bcm580x and bcm582x products, the BCM5812 allows customers to support performance from 50 mbps to 1 gbps with a common software platform. the BCM5812 security processor is a fully integrated, cost-effective cryptographic processor capable of performing 50 mbps of ipsec (3des, hmac-sha-1) system throughput. the BCM5812 includes aes in its cryptographic engine with support of key lengths up to 256 bits. in addition to its full-featured symmetric key engine, the BCM5812 offers public-key acceleration for ike processing at the rate of 50 diffie- hellman transactions per second. the BCM5812 security processor is an ideal solution for cost-sensitive applications requiring hardware acceleration with the latest cryptographic features. the BCM5812 combines performance and cost optimization for applications requiring hardware assi st for cpu-intensive ipsec and ike processing. accelerating bulk cryptographic functions (aes, 3des, sha-1, and md5) and public-key operations, the BCM5812 includes extensive hardware support for processing intensive public-key operations and minimizes the user software required for ike and ssl/ tls key negotiations. a true hardware random number generator on the BCM5812 is well suited for iv seeding and secret key generation. the BCM5812 device?s pci interface makes it a perfect solution for all cost-sensitive security applications. requiring no external components, the BCM5812 is ideal for embedded applications with strict board space and power requirements. furthermore, performance of the BCM5812 can easily be scaled to increase both ipsec and public-key processing performance. unlimited security association (sa) support via system memory and a multi-threaded dma engine utilize system memory to maximize throughput in real-world applications. able to prefetch packet contexts, this minimizes the performance degradation when processing small packets. concurrent public-key and bulk payload processing minimizes latency and improves system performance dramatically. application program interface (api) support through broadcom?s software reference library (srl) for ipsec and ssl application software offers BCM5812 users a complete system solution. the BCM5812 sdk includes support for vxworks, linux, and bsd. 33 mhz pci 2.2 32-bit master slave master controller (dma, sequencing) aes/3des/des/arcfour encryption sha-1/md5 authentication true random number generator current context prefetch context buffer pci public key acceleration
|
